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Abstract — An efficient procedure for error-value calculations 
based on fast discrete Fourier transforms (DFT) in conjunc- 
tion with Berlekamp-Massey-Sakata algorithm for a class of 
affine variety codes is proposed. Our procedure is achieved 
by multidimensional DFT and linear recurrence relations from 
Grobner basis and is applied to erasure-and-error decoding and 
systematic encoding. The computational complexity of error- 
value calculations in our algorithm improves that in solving 
systems of linear equations from error correcting pairs for many 
cases. A motivating example of our algorithm in case of Reed- 
Solomon codes and a numerical example of our algorithm in case 
of a Hermitian code are also described. 

I. Introduction 

Affine variety codes ll5l. lfT0ll are the generalization of alge- 
braic geometry (AG) codes and they are defined by a pair of a 
monomial order and any subset of F^, where ¥ q is the finite 
field of g-elements and N is a positive integer. It is known |5 1 
that affine variety codes represent all linear codes. 

The fast decoding of affine variety codes can be divided 
into two steps, namely error-location step and error-evaluation 
step. As for the fast error-location step, it is shown [2|,|4| 
that Berlekamp-Massey-Sakata (BMS) algorithm finding the 
Grobner basis of error-locator ideals for AG codes is gen- 
eralized to that for affine variety codes. As for the fast 
error-evaluation step, it is shown Q that Forney's method is 
generalized to affine variety codes. On the other hand, in |9)> 
the author showed another fast error-evaluation method based 
on multidimensional DFT and linear recurrence relations from 
Grobner basis of error-locator ideals. The method in [9| is the 
generalization of the results in 11311 . 1141 for AG codes and 
can be applied to erasure-and-error decoding and systematic 
encoding of affine variety codes. 

In this paper, we restrict the codes to a subclass of affine 
variety codes that are defined by a pair of a monomial order 
and any subset of (F*) , where F* = F 9 \{0}, in order 
to apply efficiently fast DFT. This enables us to reduce the 
computational complexity of the error-evaluation step of [9| 
in their erasure-and-error decoding and systematic encoding. 

The rest of this paper is organized as follows. Sec. HTl 
explains the case of Reed-Solomon codes. Sec. [Til] describes 
a lemma. Subsec. IIII-AI formulates multidimensional DFT. 
Subsec. IIII-BI defines two vector spaces via Grobner basis. 
Subsec . UlI-CI defines linear recurrence relations from Grobner 
basis. Subsec. UlI-DI gives an isomorphism between the vector 
spaces. Sec. [IV] applies the lemma to a class of affine variety 



codes. Subsec. IIV-AI constructs the codes. Subsec. IIV-BI pro- 
poses an erasure-and-error decoding algorithm. Subsec. IIV-CI 
relates erasure-only decoding with systematic encoding. Sec. 
[Vl estimates the computational complexity of our algorithm. 

II. A MOTIVATING EXAMPLE: REED-SOLOMON CODES 

Throughout this paper, No is the set of non-negative integers 
and a is a fixed primitive element of finite field ¥ q , where q 
is a prime power. Recall the encoding of Reed-Solomon (RS) 
codes by polynomial division 

c(x) = h{x) - R(x) = Q(x)G(x), deg(R) < n - k, (1) 

where h(x) = J2o<i<n ^ iX% * s an information polynomial 
with hi = for < i < n - k; G(x) = (x - 1) • • • (x - 
a"'*' 1 ), the generator polynomial; R(x), the remainder 
of the division with quotient Q(x). Then (ci) 0<i<n from 
c ( x ) — Eo<i<n CiX% i s a codeword of the RS code 

C(m) = {(ci) <. <n e F; 1 I c(a l ) = for all < i < to} 

with n = q — 1 and m = n — k — 1. This method is 
systematic, i.e., Ci — hi for n — k < i < n. It is well-known 
that a non-systematic encoding method is given by the IDFT 

Ci = h(a~ l ) = Y,0<l<n h l a ~ l1 sinCe ( C *) <i<n iS an ° ther 

codeword of C(m) by the Fourier inversion formula 

c(c/)= h l £ = (?-!)**. (2) 

0<i<n Q<i<n 

It is possible to encode systematically by adding another 
procedure "extension." From (Q~|), we obtain h(a l ) = R(a l ) 
for < i < n — k. Define a vector (di) 0<i<n inductively by 

f h{a l ) 0<i<n-k 
I ~.L;=o Gid l+l _ {n _ k ) n - k < K n, 

where G(x) = ^1=0 ^ GiX l +x n ~ k . Then di = R(a l ) holds 
not only for < i < n — k but also for n — k < i < n; when 
r denotes n — k, this fact is proved inductively by 

r — 1 t — 1 r — 1 

l'=Q l=Q l'=0 

where R(x) is denoted by R(x) = X^o 1 ^ ixl anc ^ tne ^ ast 
equality is deduced from G(a l ) = 5ZI=o Gia 1 1 + a 1 r = 
for < V < r. Thus, the IDFT (-d(a" l )) 0< . <n for d(x) = 



J2?=o dix 1 agrees with (Ri)o<i< n of R(x) by using Fourier 
inversion formula (O; c(x) = h(x) — R{x) again indicates the 
encoding, and moreover we obtain two ways of calculating 
R(x), i.e., a remarkable commutative diagram. 

/ x IDFT 

( d i)o<t<n " R ( X ) 



It is shown (8) that the encoding and decoding with exten- 
sion and fast DFT and IDFT actually have less computational 
complexity than the ordinary ones for many cases of RS codes. 



Extension 



DFT 



III. Main lemma 
A. Discrete Fourier transforms on (F*) 
Let N be a positive integer and let 



JV 



Remainder 



A = I a = (ai 



,ojv) 



< ^ < q - 2 
for all 1< i < N 



h(x) 



fi=(lf ? x ) W = {y=k-,^)|wi,'-,w Ar eF, x }, 

where F* = F g \ {0}. Then A is considered as the additive 
group (Z/(g — 1)Z) W , where Z/(q — 1)Z is the ring of 
integers modulo (q — 1). In this subsection, the discrete Fourier 
transforms are defined as maps between two vector spaces, 



which are isomorphic to n q 

V A = {(ha) A 

Vn = { (coj) q 

Definition 1: For (c 
defined as 



(M« l )) < l<r 

This encoding method is applicable to decoding method. 
If we have received a polynomial c(x) = X)o<i<n^ a;i = 
c(x)+e(x) containing an error polynomial e(x) in the channel, 
the syndrome vector (e(a J )) 0<i< „_ fe can be computed as 
(c(a 1 )) by substituting the roots of G(x) into c(x). 

Similarly to (O, we define a vector (si) 0<i<n inductively by 

c(a l ) < i < n - k 

v^t-i , ^ ■ . (5) 

- 1^1=0 a l s l+i-(n-k) n - k < K n, 

where a(x) — J2l=o a i xl + x * i s me error-locator polynomial 
and t < (n — k)/2 is assumed. Then, it follows from the same 
argument as that s* = e(a l ) with e(x) = ^"=0 eixl ^ or 
< i < n. Thus, the IDFT (sia^))^. for six) = 

— V v ' / 0<2<n v J 

YaZq six 1 agrees with (e t )o< i<n by using Fourier inversion where u a _ ^oi 
formula (HJ; c(x) — c(x)—e(x) indicates the correct codeword. 

Example 1: Consider C(3) of length n = 10 and dimension 
k = 6 over F u = GF(ll) = {0,1,2,- ■• ,10 mod 11}. We 
fix a primitive element 2 of Fu. We set information 

(MtKioo = (0,0,0,0,1,7,3,2,0,5). 
Then we have a non-systematic codeword 

(d = M2-*)) < J<10 - (7, 10, 3, 5, 6, 1, 5, 1, 3, 3) g C(3). 

For systematic encoding, divide h(x) by G(x) = (x — l)(x — 
2)(x-4)(x-8) = 9 + x + Ax 2 + 7x 3 + x 4 and obtain h(x) = 
Q{x)G{x) + (9 + 2x + 7x 3 ). Thus c(x) = h(x)-(9 + 2x + 7x 3 ) 
is a systematic codeword, where 

(ci)o<i<io = ( 2 > 9 >°> 3> 2 :0 5 5). 
This codeword is also computed by our method as follows. 

(fc(2*)) < i<10 = (7,3,3, 1,5, 1,6, 5, 3, 10) 
(*)o<i<io = (7,3,3,1,3,0,4,4,6,4) 
(-d(2-*)) < i<10 - (9, 2, 0, 7, 0, 0, 0, 0, 0, 0) 

foWio = ( 2 ' 9 > 0. 4 ' 7 ' 3 > 2 ' °> 5 ) e C ( 3 ) 
Next, a received word can be decoded as follows. 



1-4 



= F 



£1 



\aeA,ha_e¥ q }, 

I oj € £1, € ¥ q } . 

g Vh. let ^((cuJJ G be 



(6) 



The linear map T : Vh — > Va of 



© is called DFT on (F*)^. Moreover, for (ha) A £ V A , let 
{{ha) A ) G Vh be defined as 



(7) 



The linear map T 1 : Va — > Vh of (fT) is called IDFT on 



( E i)o<i<io = (1,9,0,4,1,7,3,2,0,10) 
(c(T)) ^ i<1Q = (4, 7, 3, 1, 2, 6, 4, 7, 5, 4), fa) = (6, 4, 1) 
( s 0o<i<io = (4,7,3,1,0,5,2,6,8,9) 
(-.s(2- 4 )) ^ <10 = (10,0,0,0,0,0,0,0,0,5) 

(c l )o<,<io = (2, 9, 0, 4, 1, 7, 3, 2, 0, 5) g C(3) □ 



□ 

v y / 

Then we have Fourier inversion formulae: Two linear maps 
J 7 : Vh — > Va and J 7-1 : — > Vq are inverse each other, i.e., 
F- 1 (^(yj) = ( c Jn and ^(^! ((^J) = (y,. 
B. Two vector spaces Vs V* 

Let 4/ C O and n = \^\. One of the two vector spaces in 
the lemma is given by 

V * = {( c ±) iS ^G#, c^gFgj. 

The other of the two vector spaces is somewhat complicated to 
define, since it requires Grobner basis theory Q. Let ¥ q [x] be 
the ring of polynomials with coefficients in ¥ q whose variables 
are x\, ■ ■ • , xjy. Let be an ideal of ¥ q [x] defined by 

= { f{x) £ ¥ q \x] I f{±) = for all ± £ . 

We fix a monomial order ^< of {x-\ s_£ Nq } . We denote, 

for f(x) £ ¥ q [x], 

LM(/) = max {x- \ s£ Nq , fs ^ 0} 

if f(x)= e F ?fe] and /fe) + 0, 



where x- 



for a = (si,-- - ,sn) 6 N^. Then 



the support S = S<n C of for * is defined by 

S = = <\ {mdeg (LM(/)) | ? f(x) G Z* } , (8) 

Then the other of the two vector 



where mdeg (x-) = s£ 
spaces is given by 

V s = V s * = { {hs) s = (h^ Sv | a E S 9) h ± € F g } . 

Since {x-\ s£ S$} is a basis of quotient ring ¥ q \x\/Z-$ 
viewed as a vector space over ¥ q , Vs is isomorphic to 
F g [x]/Z*. It is known that the evaluation map 



(9) 



is an isomorphism between two vector spaces. Thus the map 
(O is also written as 



V s 3 {hs 



(10) 



, sGS 



which is denoted as ev : Vs — > V*. In particular, it follows 
from the isomorphism (O or ( fTOb that \S<sj\ = | \J/ 1 and 
dim Fg Vs = dim F<i V* = n. 

C. Extension map £ : Vs — >• Va 

Let be a Grobner basis of Z$ with respect to ;< Assume 



that 5* consists of d elements {g^} 



0<w<d- 



where 



^ e F 9 [z] with s w G fC\ 5* . ( 1 1 ) 



For a, b G A, denote a > if aj > &j for all 1 < i < N, or 
equivalently, if there is c e A such that a = b + c. 

Definition 2: We define that (kgj . G Va is the extension 
of (hs) s G Vs if and only if, for all a G ^4 and all < w < d, 



V n {w) k , 



a = s G 5* 
a > s,„. 



□ (12) 



Namely, each ka for a G A satisfies at least one linear 
recurrence relation from (fTTT i in . In fact, there is one-to-one 
correspondence between (h s ) s G Vs and (k a ) A G Va that 
is the extension of some (h s ) s G Vs; from a given (h s ) s , 
generate (k a )A inductively by 1121 . where at least one < 
w < d can be chosen such that a > s w and the resulting 
values do not depend on the choice and order of the generation 
because of the minimal property of Grobner bases. 
Definition 3: Denote £ as the extension map via ( TTZb 



S:Vs->V A [V s 3 (K) s ^ (k^ A G V A ] 
Moreover, denote 1Z as the restriction map 



Vn 3 c, 



G V* 



Finally, denote T as the inclusion map 



X : V* Vh 



V* 9 ( CtyJ l-> 



— / * 



where c w = c^, if a; = ^ G ^ and c w = if <j G" ^. □ 
Proposition 1: Let (hs) s G Vs. Suppose that there is 

( e ^)* G ^* such that ( h i)s = (S^e* e ^ £ ) s - More- 
over, let (k a ) A = £{(hs) s ) G Va- Then it follows that 

The proof of this proposition is similar to (0]). 

Z). Isomorphic map C : Vs — >■ V* 

The following lemma is frequently used in this paper. 

Main Lemma : Let t/q, be a Grobner basis of for C 
and let £ : Vs — > Va be the extension map defined by ( fT2l . 
Then we have 

(cu L ) n G J 7-1 (£ (Vs)) => = for all w G fi\tf . (13) 

Moreover, the composition map C = 7?. o J 7-1 o £ : Vs — ► V* 
in the following commutative diagram 

V A Vh 



C 



n 



gives an isomorphism between Vs and V*. □ 
Note that the first assertion ([T3l of the lemma deduces that 
Vs is isomorphic to V* by C since the image of £ (Vs) by 
J 7-1 agrees with V*. 

On the other hand, the inverse map C _1 : V$ — >■ Vs of C 
can be written by 



V* 3 (cv) 




(14) 



which is the composition map IZoToI, where 1Z represents the 
restriction map TZ : V A ^ V s [V A 3 (ca) A H> (c £ ) s G Vs]- 
It is shown from the definitions that the matrices that represent 
two maps ( [Tol l and ( fT4t are transposed each other if the bases 
of vector spaces are fixed. 

IV. Applications of main lemma 

A. Ajfine variety codes $5$ 

Let $ C SI and R C Ssy. Consider two types of affine 
variety codes [5] with code length n = where ip- = 
ip^ 1 ■ ■ ■ ipy? is defined same as in (|5). 



G V* 




c^J G V* 



for some \hr) R G Vr 
for all r G i? | 



It follows from the isomorphic map ev of ( fTOb that 

*) = ev (Vr) 



(15) 
(16) 

(17) 



and that r G Rj is a linearly independent basis 

of C(R,W). Since J2ipe<s> c i>^~ m * s tne va l ue °f tne 

inner product for \c^\ and in Vy, the dual code of 

C(R, ty) is equal to C ± (R, VP). Thus the dimension or the 
number of information symbols k of C (i£, is equal to 
rt — in other words, n — k = \R\. 

Consider a subspace Vs\r of Vs with 5 = 5*. Since C is 



S\R 



isomorphic, we have C 1 
C (Vs\b)- Thus we obtain 

C ± ( J R,*)=C(^ s \ fl ), (18) 

which is similar to ([T7}- While the definition (O of C x (R, 
is indirect, the equality JT8l provides a direct construction 
and corresponds to non-systematic encoding of C ± (R,^). 
Actually, non-systematic encoding is obtained as, for all 



"Z/S 



S\Ri \H 



—J * 

B. Erasure-and-error decoding 

Suppose that erasure-and-error ^e^ 
received word (li-^ = + i' ■ 



= c ((y s ) ec x (E,*) by (US. 



has occurred in a 
from a channel. 

Let $i C be the set of erasure locations and let <f>2 - * 
be the set of error locations; we suppose that $1 is known 
but $2 and fe^,J are unknown and that e^, / O ^ £ 

$iU$2- If I $1 1 +2 1 $2 1 < Ofr is valid, where d FR is the Feng- 
Rao minimum distance bound [1|,[4|, then it is known that 
the erasure-and-error version [6|,[14| of Berlekamp-Massey- 
Sakata (BMS) algorithm 0,0], 03) calculates the Grobner 
basis 0$ 1 u* 2 - By using the recurrence from <5$iu$ 2 and the 
lemma, the erasure-and-error decoding is realized as follows. 
Algorithm 1: Finding erasure-and-errors 

Input: $1 and a received word G V* 

Output: (c^) G C X (R,V) 

Stepl. (%) A =(E^ $1 ^-) A 

Step 2. Calculate (7^ from syndrome (v r ) R 



Step 3. 



"SJA 



- — / A 



Step 4. Calculate G<s> 1 u® 2 from (m^] and 5$i 
Step 5. (e^ =C((ur) R ) 

Step 6. (c«) w = («^ tf -(e*) v □ 
Example 2: Consider a Hermitian code over Fg so that one 
can compare our methods with the conventional methods of 
algebraic geometry codes. Putting N = 2 and q = 9, consider 
a monomial order ^< such that (a, 6) ^ (a', 6') 3a + 46 < 
3a' + 46' or 3a + 46 = 3a' + 46', a < a' on A = [0, 7] 2 . 
Choose * = { (1/), lu) g Fg 1 i/> 4 = w 3 + cj}. In this case, the 
Grobner basis Q^, consists of one g{x, y) — x 4 — y 3 — y and 
the support 5* of is { (si, s 2 ) g A| s 2 < 2}. Let fiCSj 
be i? = { (ri,r 2 ) G 5*| 3n + 4r 2 < 11} then d FR = 7. All 
values in error-only (i.e. $1 = 0) case of Algorithm Q] are 



shown in bottom row of Fig. [T] where the elements of Fg are 
represented by their numbers of powers of a primitive element 
a with a 2 + a = 1, i.e., 0, 1, • • • ,7 means a°, a 1 , ■ ■ ■ , a 7 , 
respectively, and —1 means G Fg. At Step 4 in Algorithm 
[U the Grobner basis Qq> 2 of Z$ 2 is obtained as 



9 



(0) 



a 2 + a 5 x + a 6 y + x 2 , 



G<t>2 



jW = Q,5 _|_ 3; _|_ Q,5y _|_ 



□ 



,(2) 



C. Systematic encoding as erasure-only decoding 

Let $ C $ C U so that $ corresponds to the set 
of redundant positions and W\$ corresponds to the set of 
information positions. Then 5$ C 5* holds since Z<& D 
and the definition ([8). From now on, consider the dual affine 
variety codes (O with i? = 5$, i.e., C = C x (5$,*). 
Then k = dim^ C = n — |<£> holds. Systematic encoding 

means that, for a given information ( fu, ) , one finds 

V — /*\$ 

fey, J G C with c.jf, = h^p for all tp G W Since $ is known, 
systematic encoding can be viewed as erasure-only decoding 
for (V) $ = (-c £ ) , i.e., |$ x | = |$| and |$ 2 | = 0. 
Actually, in case of RS codes, we viewed systematic encoding 
as erasure-only decoding since |$| = n — k = dpR — 1. 
However, in general case, the correctable erasure-and-error 
bound |$i| + 2|<f> 2 | < Ofr is not valid (cf. Example[3]). 

Nevertheless we can show that systematic encoding works 
as erasure-only decoding. We calculate the Grobner basis Qq, 
in advance, which has the role of generator polynomials in case 
of RS codes. Although the following Algorithm [2] is equal to 
a special case of Algorithm Q] for $1 = $ and $2 = 0, we 
assign it an algorithm in order to indicate the encoding. 

Algorithm 2: DFT systematic encoding 



Input: $ and an information word ( h^, 

\ —J *\$ 

Output: {c^ G C with (^c^j ^ = 

Step 1. (ua) A = (E^ e *\*%0-) A 

Step 2. (c0) # =-C((S 2 ) g J 

Example 3: (Continued on Example [2]) Let 



(a, 1), (a, a), (a, a 3 ), (a 3 , 1), (a 3 , a), 
(a 3 , a 3 ), (a 5 , 1), (a 5 , a), (a 7 , 1) 



Then Grobner basis Q%, = {g^°\ g^, g^ 2 \ g' 3 '} is as follows: 

3 (°) = 1 + X 4 , gi 3 ) = l + y + y 3 , 

= a + a 2 x + a 3 x 2 +a i x 3 + y(a 5 +a e x+a 7 x 2 + x 3 ), 
g {2) = a 5 +ax + ax 2 + y(a 7 + a 3 x + a 3 x 2 ) + y 2 (a i +x+x 2 ). 

Thus we have 5$ = R and |$i| = 9 > oVr = 7. All values 
of Algorithm |2] are shown in top row of Fig. Q] □ 



(V) n<t > (" 2 ), > £ {^) s ) > (- C ±)» > i C t) 
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Fig. I. (Top row.) Systematic encoding of the shortened Hermitian code C ± (S*,^) by Algorithmic] A given information is (h^j^.^ and 
the systematic codeword is (c,/,)^. (Bottom row.) Its decoding by Algorithm [T] A received word is = { c i>)i S , + ( e V')^- 



V. Estimation of complexity 

We estimate the number of finite-field operations, i.e., addi- 
tions, subtractions, multiplications, and divisions, in Algorithm 
[T] for codes ( fToT i. For the computation of DFT and IDFT, we 
employ multidimensional FFT algorithm; it is well-known that 
its number of finite-field operations is the order of LlogL, 
where L is the data size and L = q N in our case. Summarizing 
the results, we evaluate the algorithm as follows, where n is 
code length, N is dimension of O, q is finite-field size, and d 
is the number of elements in Grobner bases. 



Algorithm [T] 


manipulation 


order of bound 


Step 1 




q N log q N 


Step 2 


BMS 


dn 2 


Step 3 




q N log q N 


Step 4 
Step 5 


BMS 

C((Sr)«) 


dn 2 

N i N l N 

nq + q log q 


Step 6 




n 



Thus the total number of finite-field operations in Algorithm 
[T] is bounded by the order of dn 2 + nq N . In particular, the 
number of finite-field operations for calculating error values 
apart from BMS algorithm has the order of nq N . In the proof 
(5) of {linear codes} = {affine variety codes}, q N is chosen 
as q N ~ x < n < q N , which leads nq N < qn 2 . Thus, if q < n, 
the computational complexity qn 2 of error-value calculation 
by Algorithm Q] improves n 3 by error correcting pairs in ifTTl 
and n 3 by inverse matrices of proper transforms in |12|. 
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